mod_nss: FakeBasicAuth authentication bypass

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...

ezCourses 'admin.asp' Security Bypass Vulnerability

ezCourses is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. Attackers could exploit the issue to bypass certain security restrictions and add or change the 'admin' account password. OpenVAS Vulnerability Test $Id: gbezcourses49907.nasl 5769...

Pastebay Password Bypass

Advisory Title: Pastebay Password Bypass Date: April 18th, 2011 Website Link: http://pastebay.com/ -= Info =- Pastebay is a site for free, uncensored text hosting. -= The Advisory =- Pastebay suffers from a password bypass vulnerability that allows an attacker to view any paste that is password...

Mandriva Update for sudo MDVSA-2011:018 (sudo)

Check for the Version of sudo OpenVAS Vulnerability Test Mandriva Update for sudo MDVSA-2011:018 sudo Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2011-0010

check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command...

JE CMS 1.0.0 universal password to log in with the injection vulnerability-vulnerability warning-the black bar safety net

JE CMS = 1.0.0 program appeared two vulnerabilities, one in the login authentication can be using Universal password bypass. Another isSQL injectionvulnerabilities. 1. Bypass Authentication by SQL Injection Vulnerability //login validation vulnerability in administrator\login.php page, lines...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

Design/Logic Flaw

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

CVE-2010-1820

The CVE-2010-1820 issue affects Apple Mac OS X AFP Server (10.6.x up to 10.6.4). The vulnerability stems from improper error handling, allowing a remote attacker who knows a valid account name to bypass the password requirement for AFP shared-folder access. Affected product: Mac OS X AFP Server; ...

CVE-2010-1820

Apple Filing Protocol AFP Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name...

rapidCMS V2 backend authentication bypass vulnerability-vulnerability warning-the black bar safety net

rapidCMS V2 background login authentication has not been strictly filtered, resulting in Universal password bypass vulnerability. Use method: User: something Pass: 'OR '1'='1 Demo : http://site/admin.php...

PunBB <= 1.3.4 Pun_PM <= v1.2.6 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid,...

WordPress &lt;= 2.9.2绕过口令保护漏洞

BUGTRAQ ID: 38876 WordPress是一款免费的论坛Blog系统。 用户可以对WordPress论坛中的每个页面或帖子设置口令，这些口令可以相同，但通过口令访问的功能设置了全站点都通用的全局Cookie，因此用户只要获得了一个对页面或帖子所设置的口令，就可以看到所有受保护的页面或帖子（在请求时会自动许可访问）。 WordPress = 2.9.2 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

GRUB 2 password bypass

Error in password protection allows to boot system by guessing first character of the password...

CVE-2009-2836

Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors...

CVE-2009-1596

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...

CVE-2009-1596

CVE-2009-1596 affects Ignite Realtime Openfire prior to 3.6.5. The register.password (canChangePassword) console setting is not properly enforced, allowing remote authenticated users to bypass the intended policy and change their own passwords via a passwd_change IQ packet. The vulnerability enab...

openfire -- Openfire No Password Changes Security Bypass

Secunia reports: A vulnerability has been reported in Openfire which can be exploited by malicious users to bypass certain security restrictions. The vulnerability is caused due to Openfire not properly respecting the no password changes setting which can be exploited to change passwords by sendi...

CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter...

Crack the freezing point Restore Wizard（Deep Freeze of approach-vulnerability warning-the black bar safety net

Here and share with you my results, the previous is the freezing point restore screwed, and everyone else previously met the problem is: Ctrl+Shift+Alt+F6 or Shift double click the Deep Freeze icon call not the freezing point, so that only every time you restart your computer the restore, the...